System Shutdown/Reboot
Adversaries may shutdown/reboot systems to interrupt access to, or aid in the destruction of, those systems. Operating systems may contain commands to initiate a shutdown/reboot of a machine or network device. In some cases, these commands may also be used to initiate a shutdown/reboot of a remote computer or network device via [Network Device CLI](https://attack.mitre.org/techniques/T1059/008) (e.g. <code>reload</code>).(Citation: Microsoft Shutdown Oct 2017)(Citation: alert_TA18_106A) They may...
BY SOURCE
PROCEDURES (12)
Auto-extracted: 4 detections for process creation monitoring
Auto-extracted: 3 detections for general monitoring
Auto-extracted: 2 detections for persist
Auto-extracted: 1 detections for script execution monitoring
Auto-extracted: 1 detections for kernel monitoring
Auto-extracted: 1 detections for suspicious
Auto-extracted: 1 detections for remote
Auto-extracted: 1 detections for script execution monitoring
Auto-extracted: 1 detections for suspicious
Auto-extracted: 1 detections for service
Auto-extracted: 1 detections for azure
Auto-extracted: 1 detections for azure